---
typeId: req
recordId: benac-cap-001
fields:
  title: Explicit capability declaration
  statement: >-
    A package shall declare every capability it requires for each operation phase.

    A package shall declare capabilities required by each package interface.

    The operation phases shall include package import, package validation, package
    inspection, package approval, fixture execution, package invocation,
    package-requested effects, retrieval operations, storage operations, and compute
    operations.

    A declared capability shall not grant authority.

    Package import shall not grant capability authority.

    Package trust shall not grant capability authority by itself.

    A Host Implementation shall not reject package content solely because a declared
    capability is not currently granted by Local Policy, unless the capability is
    required for package import or package validation.

    A Host Implementation shall report declared capabilities and capability status
    during inspection.
  rationale: >-
    Package authors must declare what authority package operations require, and users,
    agents, and Local Policy must be able to review those declarations before grant.
  verification: >-
    Package validation rejects missing required capability declarations. Inspection shows
    declared capabilities and operation phases. Invocation fails closed when a required
    capability is not declared or not granted.
  testable: true
  status: draft
  area: BENAC-CAP
  sourceDocument: user-requested schema-first requirements cleanup
  sourceVersion: 2026-05-06
  sourceSections:
    - Trust, policy, and capability model
  order: 90
---
